Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/eF7suSmq4yx2BFY6d-cohJB91BY.roa
File: eF7suSmq4yx2BFY6d-cohJB91BY.roa (raw, json)
Hash identifier: DzC5PB8kYDwTA0jqU0RlOi93jFxS5F+OZkkhZlumqbU=
Subject key identifier: 78:5E:EC:B9:29:AA:E3:2C:76:04:56:3A:77:E7:28:84:90:7D:D4:16
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 2945
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/eF7suSmq4yx2BFY6d-cohJB91BY.roa
Signing time: Fri 01 Sep 2023 10:06:20 +0000
ROA not before: Fri 01 Sep 2023 10:06:20 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 9924
IP address blocks: 123.195.224.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10565 (0x2945)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 1 10:06:20 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=785EECB929AAE32C7604563A77E72884907DD416
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:6c:08:3d:89:de:dc:36:42:b2:ad:8d:9f:f8:
9c:4c:6e:78:31:78:eb:63:b6:cd:c7:17:ce:85:90:
e2:f9:e3:01:7c:20:12:a3:6f:0e:85:27:a1:8b:c4:
21:9f:f1:e0:e4:f0:f5:f8:c8:56:4d:04:5b:7b:57:
f5:15:b5:11:0c:ff:69:17:68:8a:f8:77:2f:64:8d:
f9:92:fb:0e:16:c5:62:26:ae:db:73:d0:fa:8d:62:
40:cb:db:d3:3d:dc:d4:bc:08:f8:e4:97:17:30:a8:
cd:a2:f8:21:82:3b:9b:be:f5:f5:d5:cb:8f:44:c8:
5e:ca:dc:9f:b1:0c:91:7f:67:97:02:2f:63:2e:6f:
48:93:f1:b5:2a:5c:ad:76:31:97:02:5a:5c:a9:b6:
09:4a:36:9d:2f:ff:b7:16:ec:ea:e4:16:c4:6f:5d:
81:7a:cf:ce:99:2b:6c:58:8a:1b:a6:0c:43:39:de:
e3:d9:87:ed:d9:7c:02:6b:5e:aa:f0:73:c6:db:96:
2f:e8:3d:f1:36:69:8a:a7:dd:43:ec:12:12:54:e6:
73:14:47:44:2e:2f:2a:41:7a:57:3f:c7:ef:98:bb:
ae:a5:b1:ea:f0:08:36:17:a8:34:62:ff:eb:6c:44:
fa:af:cb:e9:e9:e8:59:16:35:a0:cd:f4:3b:c2:6d:
6b:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:5E:EC:B9:29:AA:E3:2C:76:04:56:3A:77:E7:28:84:90:7D:D4:16
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/eF7suSmq4yx2BFY6d-cohJB91BY.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.195.224.0/21
Signature Algorithm: sha256WithRSAEncryption
44:f6:9c:16:19:be:34:e8:c2:8b:4d:a1:7e:39:2c:ee:6b:27:
a4:fb:d8:2c:8f:7c:ea:ad:2c:58:8b:14:71:74:72:ea:70:7e:
bc:57:4a:1f:d1:a9:2e:ff:74:c3:1c:fb:6b:1d:60:83:1a:60:
d5:ad:55:05:c1:58:d1:92:d1:9b:32:68:d5:f6:54:a8:b1:e4:
64:f1:5f:a0:b1:ca:0c:95:12:8f:4b:59:44:21:ff:09:06:f1:
0e:aa:12:87:75:f3:a6:0a:81:e4:92:fe:b4:25:1f:4f:d4:5e:
2a:2c:51:af:9f:91:de:3a:8c:c2:7d:80:87:86:59:fa:24:dc:
e0:66:1a:7b:30:d7:92:81:3f:5f:af:3a:b8:d5:b8:29:17:84:
71:09:20:9d:9b:0b:3b:54:11:b6:85:57:51:83:de:60:b6:ea:
21:fd:78:47:c4:6e:61:82:7f:73:08:3f:c8:35:cb:79:17:4e:
08:e2:26:dd:4b:47:69:e6:d0:18:8f:20:f9:9e:9e:2e:7c:43:
a1:d4:35:ac:be:cb:ad:24:7c:3b:dc:f3:58:43:4d:68:ac:4b:
49:d1:06:e3:6b:cb:a0:23:b5:d2:32:3b:d0:8c:30:3c:bd:fd:
34:09:21:c8:db:4f:9b:5b:36:ba:b1:9a:f4:40:f7:e4:bc:5f:
93:4e:1e:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:26 2024 by rpki-client on console-fra.rpki-client.org